Privacy Policy
Last updated: April 13, 2026
1. Introduction
This Privacy Policy describes how Newstats, a company registered in Ireland ("we", "us", "our"), collects, uses, and protects your personal data when you use the HoopsAPI service and website at hoopsapi.com ("Service"). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Irish and EU data protection law.
2. Data Controller
Newstats is the data controller for personal data collected through the Service. Contact: contact@newstats.eu.
3. Data We Collect
Account data
When you sign up, we collect your name and email address via our authentication provider (Clerk). If you sign up with Google, we receive your name, email, and profile picture from Google.
Billing data
Payment information is processed by Stripe. We do not store credit card numbers. We retain your Stripe customer ID for billing purposes.
Usage data
We record API usage (request counts, endpoints accessed) for rate limiting and analytics. API keys are stored to authenticate your requests.
Cookies
We use essential cookies for authentication (Clerk session cookies) and the Tawk.to live chat widget. No advertising or tracking cookies are used.
4. How We Use Your Data
- To provide and maintain the Service
- To authenticate your API requests
- To process payments and manage subscriptions
- To enforce rate limits and usage policies
- To communicate with you about your account (e.g. billing, security)
- To respond to support inquiries
5. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract: processing necessary to provide the Service you signed up for
- Legitimate interest: fraud prevention, security, and service improvement
- Legal obligation: tax and financial record-keeping
6. Sub-processors
We use the following third-party services that process your data:
| Service | Purpose | Location |
|---|---|---|
| Clerk | Authentication and user management | USA |
| Stripe | Payment processing | USA |
| Unkey | API key management and rate limiting | USA |
| Supabase | Database hosting | EU |
| Cloudflare | Hosting, CDN, and security | Global |
| Tawk.to | Live chat support | USA |
Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or equivalent safeguards as provided by these processors.
7. Data Retention
- Account data: retained for as long as your account is active, plus 30 days after deletion
- Billing data: retained as required by tax law (typically 6 years in Ireland)
- Usage data: retained for 90 days for analytics, then aggregated
8. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Eraseyour data ("right to be forgotten")
- Restrict processing
- Data portability — receive your data in a structured format
- Object to processing based on legitimate interest
To exercise any of these rights, email contact@newstats.eu. We will respond within 30 days.
9. Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure credential storage, and access controls. API keys are stored securely and can be revoked at any time.
10. Children
The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the email associated with your account. The "Last updated" date at the top reflects the most recent revision.
12. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.
13. Contact
For questions about this Privacy Policy or your personal data, contact us at contact@newstats.eu.